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ROUTE CONTROL DEVICE AND ROUTE CONTROL SYSTEM 

BACKGROUND OF THE INVENTION 
The present invention relates to a route control 
5 device to which a plurality of network terminals are 
connected, and to a system for providing services about 
a network to the plurality of network terminals. 

There has hitherto been a system in which a user 
receives a service from ISP (Internet Service Provider) . 
10 Specifically, the user connects, by use of PPP 

(Point-to-Point Protocol), a self-possessed IP routing 
device (that supports Internet Protocol) to an edge router 
installed by the ISP. 

At this time, the edge router authenticates the user . 
15 The edge router assigns an IP address to the IP routing 
device of the user who has been authenticated. Then, the 
IP routing device performs communications based on a 
service previously agreed upon between the user and the 
ISP by use of the assigned IP address. 
20 This type of IP routing device is exemplified by 

a router. A plurality of IP devices are connected to this 
router. The IP devices connected to the router are 
exemplified such as a personal computer, and an IP 
telephone, a Television (ITTV) that support IP (Internet 
25 Protocol), and so on. The router receives a packet from 
the IP device connected to the router itself, then rewrites 
a header of this packet and forwards it to an edge router. 
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Further, the router receives a packet from the edge router, 
then rewrites a header of this packet and forwards it to 
a proper IP device. 

Examples of the services agreed upon between the 
5 user and the ISP are a fixed bandwidth assurance, a VPN 
(Virtual Private Network), multicasting, etc... 

SUMMARY OF THE INVENTION 
The user has hitherto been normally given one service 

10 selectable per connection line (contract line) contracted 
between the user and the ISP. Therefore, the user, in 
the case of receiving the service suited to the IP device 
to be used, needs to establish a contract with the ISP 
about the service suited to this IP device. For example, 

15 if the user receives the VPN service, there is only one 
VPN that the ISP enables the user to use. Consequently, 
the user is required to make a contract with the ISP each 
time the user connects to a different VPN corresponding 
to the IP device. 

20 Accordingly, it is a primary object of the present 

invention, which was devised to obviate the above problems, 
to provide a route control device enabling a user to 
automatically receive a service suited to an IP device 
from an ISP edge router. 

25 To accomplish the above object, according to 

a first aspect of the present invention, a route control 
device disposed between a plurality of first devices and 
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a second device for providing a service to the first devices, 
includes a plurality of I/O modules, to which the first 
devices can be connected, inputting and outputting data 
to the first devices thereto, a service storage module 
5 storing a service that should be provided from the second 
device to the first devices connecting to the I/O module 
in a way that maps the service to each the I/O module, 
a service determining module searching through the service 
storagemodule and thus determining the service that should 
10 be provided to the first devices connecting to any one 
of the I/Omodules, and a service request module requesting 
the second device to provide the service determined by 
the service determining module to the first devices 
concerned . 

15 According to the first aspect of the present 

invention, the first devices are connecting to the I/O 
module . The service storage module stores , for every I/O 
module, the service provided from the second device to 
the first devices connecting to this I/O module. The 

20 service determining module searches through the service 
storage module and thus determines a service mapping to 
an arbitrary I/O module . Namely, the service determining 
module determines the service provided to the first devices 
connecting to the arbitrary I/O module . Then, the service 

25 request module requests the second device to provide the 
relevant first devices with the service determined by the 
service determining module. 
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With this scheme, the services mapping to the I/O 
modules to which the first devices are respectively 
connected, are automatically provided from the second 
device . 

5 The route control device according to the first 

aspect of the invention may further includes a setting 
module setting a content stored on the service storage 
module in accordance with an input from the first devices . 

In the route control device according to the first 

10 aspect of the invention, the setting module may provide 
the first devices with a user interface for setting content 
stored on the service storage module, and may set the 
content stored on the service storage module on the basis 
of data inputted via the user interface. 

15 The route control device according to the first 

aspect of the invention may further include a link 
detection module detecting the I/O module with an 
established link to the first devices among the plurality 
of I/O modules, wherein the service determining module 

20 may determine the service that should be provided to the 
first devices connecting to the I/O module detected by 
the link detection module, and the service determining 
module and the service request module may operate when 
the link detection module detects the establishment of 

25 the link. 

In the route control device according to the first 
aspect of the invention, the link detection module may 
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further detect the I/Omodule of which the link established 
so far is disconnected, the service determining module 
may determine the service provided to the first devices 
connecting to the I/O module, and the service request 

5 module may request the second device to stop providing 
the service to the first devices. 

The route control device according to the first 
aspect of the invention may further include a data 
detection module detecting the I/O module, to which the 

10 data is inputted from the first devices, among the 

plurality of I/O modules, wherein the service determining 
module may determine the service that should be provided 
to the first devices connecting to the I/O module detected 
by the data detection module, and the service determining 

15 module and the service request module may operate when 
the data detection module detects the input of the data. 

In the route control device according to the first 
aspect of the invention, the data detection module may 
further detect the I/O module to which the data is not 

20 inputted for a fixed period of time, the service 

determining module may determine the service provided to 
the first devices connecting to the I/O module, and the 
service request module may request the second device to 
stop providing the service to the first devices. 

25 In the route control device according to the first 

aspect of the invention, the service storage module may 
further store, for each of the I/O modules, information 
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indicating which module, the link detection module or the 
data detection module, may control the operations of the 
service determining module and of the service request 
module with respect to the I/O module. 

5 In the route control device according to the first 

aspect of the invention, the service storage module, if 
there is added information required with an execution of 
the service, may further store the added information in 
a way that maps the added information to the service. 

10 In the route control device according to the first 

aspect of the invention, the service may include providing 
a VPN (Virtual Private Network) , and the service storage 
module, when storing the virtual private network as a 
service, may store as the added information a user 

15 identifier and a password that are required for the first 
devices connecting to the I/Omodule mapping to this server 
to be connecting to the virtual private network. 

In the route control device according to the first 
aspect of the invention, the service may include a 

20 best-effort service and a fixed bandwidth assurance 
service as QoS (Quality of Service) . 

The route control device according to the first 
aspect of the invention may further include a download 
module downloading a program for controlling an operation 

25 of a self-device from the second device. 

According to a second aspect of the present invention, 
a route control system includes a plurality of first 
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devices, a second device for providing a service to the 
first devices and a third device disposed between the first 
devices and the second device- The third device includes 
a plurality of I/O modules, to which the first devices 
5 are connected, inputting and outputting data to the first 
devices connected thereto, a first service storage module 
storing a service that should be provided from the second 
device to the first devices connecting to the 
inputting/outputting module in a way that maps the service 

10 to each the I/O module, a service determining module 
searching through the first service storage module and 
thus determining the service that should be provided to 
the first devices connecting to any one of the I/O modules, 
and a service request module requesting the second device 

15 to provide the service determined by the service 

determining module to the first devices concerned. The 
second device includes a second service storage module 
storing the service requested by the third device in a 
way thatmaps the service to the first devices, anda service 

20 execution module determining a relevant service for the 
first devices by searching through the second service 
storage module and thus determining the service. 

In the route control system according to the second 
aspect of the invention, the second device may further 

25 include an authentication module authenticating the third 
device or a user of the third device on the basis of data 
received from the third device in cooperation with an 
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authentication server, and the service execution module 
may execute the service about only the third device 
permitted as a result of the authentication. 

In the route control system according to the second 
5 aspect of the invention, the service request module may 
request in a lump the second device to provide a plurality 
of services respectively to the first devices concerned. 

In the route control system according to the second 
aspect of the invention, the second device may further 

10 include an accounting module charging the user of the first 
devices a fee for the service executed by the service 
execution module on the basis of a content of this service . 

In the route control system according to the second 
aspect of the invention, the second device and the third 

15 device may be so connected as to be communicable via a 
communication line based on one point-to-point protocol, 
and the service request module may make a request for the 
service different for every session of Transmission 
Control Protocol. 

20 According to the present invention, the services 

mapping to the I/O modules to which the first devices are 
connected can be automatically provided respectively for 
the plurality of first devices. 

25 BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a view showing architecture of a system 
utilizing a router as a route control device in this 
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embodiment ; 

FIG. 2 is a block diagram showing the router; 
FIG. 3 is a diagram showing an example of a service 

table; 

5 FIG. 4 is a diagram showing an example of a translation 

table; 

FIG. 5 is a block diagram showing an edge router; 
FIG. 6 is a diagram showing an example of the service 

table; 

10 FIG. 7 is a flowchart showing an operational example 

of the router; and 

FIG. 8 is a diagram showing an operation sequence 
of the system in this embodiment. 

15 DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

Next, a system using a route control device in an 
embodiment of the present invention will hereinafter be 
described with reference to the accompanying drawings . 
Note that the explanation of this embodiment is an 
20 exemplification, and architecture of the present 

invention is not limited to the following discussion. 
[Outline of System] 

FIG. 1 is a view illustrating system architecture 
of the system using a router defined as a route control 
25 device in the embodiment of the present invention. 

According to this system, devices installed in a general 
home are a router 1. Further, according to this system, 
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a personal computer (PC) 3, an ITTV 4, an IP telephone 
5 and other IT electric household appliances 6 which are 
connected downstream of the router 1 . Further, in this 
system, an edge router 2, a streaming distribution server 
5 23, an IPsec (IP security) trunk 25, a RADIUS (Remote 
Authentication Dial-In User Service) server 26 and an 
unillustrated core router, which are installed based on 
ISP. The followings are explanations of the respective 
components . 

10 <Router> 

The router 1 is constructed of an IP-based router 
(corresponding to a [route control device] and a [third 
device] according to the present invention) . FIG. 2 is 
a block diagram of the router 1 as the route control device 

15 in the embodiment of the present invention. The router 
1 includes hardware components such as a CPU, a main memory 
(RAM) , a sub-storage device, an acceptable connector, a 
PHY chip (physical layer chip) and a switch chip, which 
are connecting to each other via a bus. The router 1, 

20 when various categories of programs stored on the 

sub-storage device (especially on a program storage unit 
16) are loaded into the main memory and executed by the 
CPU, functions as a device including a downstream 
connection unit 7, a service control unit 8 , a route control 

25 unit 9 and an upstream connector unit 10. The router 1 
is a so-called [consumer router] or [domestic router] and 
installed in home. This type of consumer router is 
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exemplified such as an ADSL (Asymmetrical Digital 
Subscriber Line) router, an ISDN (Integrated Services 
digital Network) router and so forth. 

The downstream connector unit 7 is constructed of 
5 a plurality of acceptable connectors and PHY chips. The 
plurality of acceptable connectors (corresponding to an 
[I/O module] according to the present invention) may 
involve the use of any types of connectors such as a T-type 
connector, RJ-45 ( Regis tered Jack-4 5 ) , etc... Further, 

10 the PHY chip may be based on whatever specifications such 
as 10BASE2 (LAN interface having a transmission rate of 
10Mbps, defined by IEEE802.3), 100BASE-T (100Mbps) and 
so on. The PHY chip and the acceptable connector are, 
however, constructed of those corresponding to the same 

15 specifications. The connector unit 7 transmits and 

receives the data between the router 1 and the IP device 
(the PC 3, the ITTV 4, the IP telephone 5, etc.) connected 
to the router 1. 

The service control unit 8 is constructed of a CPU, 

20 a RAM and a nonvolatile storage device. The service 
control unit 8 includes a service storage unit 11, a service 
determining unit 12, a service setting unit 13, a linkup 
detection unit 14, a packet detection unit 15, a program 
storage unit 16 and an update judging unit 17. 

25 The service storage unit 11 is constructed of a 

nonvolatile storage device such as a flash memory, etc. 
(corresponding to a [ service storage module ] and a [first 
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service storage module] according to the present 
invention) . The service storage unit 11 is stored with 
user IDs and passwords which are used for authentication 
in the edge router 2. Further, the service storage unit 
5 11 is stored with a service table 11A. FIG* 3 is a diagram 
showing an example of the service table 11A stored on the 
service storage unit 11. The service table 11A will be 
explained referring to FIG. 3. The service table 11A 
retains pieces of information registered in fields such 

10 as a connector number, a service name, a connection 

detection mode, a user ID and a password, which are mapped 
to each other. 

The connector number is a number assigned uniquely 
to each acceptable connector provided in the downstream 

15 connector unit 7 . The connection detection mode takes 
a value of any one of categories "packet" and "link". If 
the connection detection mode is "packet", this implies 
that a packet is inputted to the acceptable connector, 
and a service corresponding thereto is requested of the 

20 edge router 2. Namely, when the packet is inputted via 
this acceptable connector for the first time after a packet 
receipt timeout, the service corresponding thereto is 
requested of the edge router 2. Herein, the "packet 
receipt timeout" indicates a state where the packet is 

25 not inputted to a certain acceptable connector for a fixed 
or longer period of time. By contrast, if the connection 
mode is the "link", when a linkup between this acceptable 
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connector and the IP device is detected, this implies that 
a corresponding service is requested of the edge router 
2 . 

The service name is a name of the service provided 
5 to the IP device. Herein, the "IP device" indicates an 
IP device connected to the acceptable connector assigned 
the connector number mapping to the service name . Further, 
herein the "service provided'' indicates a service provided 
to the ISP edge router 2. The user ID and the password 

10 are pieces of information (corresponding to [added 

information] according to the present invention) set in 
a case where authentication (that uses the user ID and 
the password) is required in the service specified by the 
service name mapping thereto. 

15 For instance, according to the service table 11A 

shown in FIG. 3, the IP device connected to the acceptable 
connector of which a connector number is "3" is provided 
with VPN (Virtual Private Network) as a service. At this 
time, the user ID used for this VPN is "userl", and the 

20 password is "1234", 

The service determining unit 12 (corresponding to 
a [service determining module] and [a service request 
module] ) according to the present invention) is 
constructed of a CPU, a RAM, etc... The service 

25 determining unit 12, when receiving the packet from the 
downstream connector unit 7, judges a connector number 
mapping to the acceptable connector to which the packet 
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is inputted. The service determining unit 12, based on 
the connector number acquired as a result of the judgement, 
searches through the service table 11A stored on the 
service storage unit 11. Then, the service determining 
5 unit 12 determines a service requested of the edge router 
2. The service determining unit 12 generates a service 
request signal for requesting the edge router 2 for the 
determined service, and transmits this service request 
signal to the edge router 2 via the upstream connector 

10 unit 8. The service request signal contains a service 
content requested, and a user ID and/or a password as the 
necessity may arise. Further, c the service request 
signal contains a post-translation port number. This 
post-translation port number is a post- translation port 

15 number assigned to the IP device connected to the 

acceptable connector mapping thereto . A detailed content 
of the post-translation port number will be given later 
on. Further, the service determining unit 12, for 
requesting the edge router 2 to connect the router to the 

20 edge router 2, transmits a connection request signal to 
the edge router 2 . The connection request signal contains 
a user ID and a password stored on the service storage 
unit 11. 

Moreover, the service determining unit 12, when 
25 notified of the connector number mapping to the acceptable 
connector with the link released or the packet that is 
not received for the fixed or longer period of time, 
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requests the edge router 2 to stop a service mapping to 
this connector number. 

The service setting unit 13 (corresponding to a 
[setting module] according to the present invention) is 
5 constructed of a CPU, a RAM, etc. . . The service setting 
unit 13 writes, based on data received from the downstream 
connector unit 7, the contents of the service table 11A 
stored on the service storage unit 11. 

To be specific, the service setting unit 13 

10 implements a Web server function and provides, based on 
HTTP (HyperText Transfer Protocol ) , a user interface (UI) 
(that is a set content) to the IP device connected to the 
downstream connector unit 7 . At this time, the IP device 
connected to the downstream connector unit 7 is a device 

15 capable of utilizing a Browser that supports HTTP. 

Further, at this time the UI provided by the service setting 
unit 13 is used for rewriting the contents of the service 
table 11A on the IP device. The service setting unit 13 
may receive, for every acceptable connector , the rewritten 

20 contents of the service table 11A from the IP device and 
may also receive a set of rewritten contents for a plurality 
of acceptable connectors at one time. 

Further, the service setting unit 13, when requested 
to change the service with respect to the acceptable 

25 connector through which the communications are being 
performed, does not reflect a content of this change in 
the service table 11A. In this case, the service setting 
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unit 13 notifies the edge router 2 of the content of this 
change via the service determining unit 12. Namely, in 
this case, the service determining unit 12 generates a 
service request signal based on the change content received 
5 from the service setting unit 13, and transmits this signal 
to the edge router 2 . 

The linkup detection unit 14 (corresponding to a 
[link detection module] according to the present 
invention) is constructed of a CPU, a RAM, etc... The 

10 linkup detection unit 14 detects a linked-up acceptable 
connector among the acceptable connectors provided in the 
downstream connector unit 7 . The linkup detection unit 
14, upon detecting the linked-up acceptable connector, 
notifies the service determining unit 12 of a connector 

15 number mapping to this acceptable connector. Then, the 
linkup detection unit 14 instructs the service determining 
unit 12, to request the edge router 2 to provide a service 
mapping to the connector number of the acceptable 
connector . 

20 Further, the linkup detection unit 14 detects a 

link-released acceptable connector. Then, the linkup 
detection unit 14 notifies the service determining unit 
12 of a connector number mapping to this link-released 
acceptable connector . 

25 The packet detection unit 15 (corresponding to a 

[data detection module] according to the present 
invention) is constructed of a CPU, a RAM, etc . . The packet 
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detection unit 15 detects an acceptable connector to which 
the packet is inputted for the first time after a packet 
receipt timeout, among the acceptable connectors provided 
in the downstream connector unit 7 . The packet detection 

5 unit 15, upon detecting an acceptable connector receiving 
the packet, notifies the service determining unit 12 of 
a connector number mapping to this acceptable connector. 
Then, the packet detection unit 15 instructs the service 
determining unit 12 to request the edge router 2 to provide 

10 a service mapping to a connector number of this acceptable 
connector . 

Moreover, the packet detection unit 15 detects an 
acceptable connector that does not receive a new packet 
for the fixed or longer period of time . Namely, the packet 
15 detection unit 15 detects the acceptable connector falling 
into the packet receipt timeout. Then, the packet 
detection unit 15 notifies the service determining unit 
12 of a connector number mapping to this acceptable 
connector . 

20 The program storage unit 16 is constructed of a 

nonvolatile storage device such as a flash memory, etc. . 
The program storage unit 16 is stored with a program (an 
application program) described about the operation of the 
service control unit 8. Accordingly, the service 

25 determining unit 12, the service setting unit 13, the 
linkup detection unit 14, the packet detection unit 15 
and the update judging unit 17 accesses the program storage 
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unit 16 via the unillustrated bus, then read commands 
therefrom and thus function. 

The update judging unit 17 is constructed of a CPU, 
a RAM, etc. . . The update judging unit 17 judges whether 
5 the program stored on the program storage unit 16 should 
be updated or not. The update judging unit 17, when an 
update command is inputted from the IP device via the 
downstream connector unit 7, judges that the program should 
be updated. Further, the update judging unit 17, when 

10 the update command is inputted from the edge router 2 via 
the upstream connector unit 10, judges that the program 
should be updated. Moreover, the update judging unit 17, 
if a predetermined time has elapsed, judges that the 
program should be updated. The update judging unit 17, 

15 when judging that the program should be updated, requests 
the edge router 2 to start downloading through the upstream 
connector unit 10. The program is downloaded into the 
update judging unit 17 from the edge router 2 via the 
upstream connector unit 10 . Then, the update judging unit 

20 17 updates the program stored on the program storage unit 
16 by use of the program downloaded. 

The route control unit 9 is constructed of a CPU, 
a RAM, a switch chip, etc... The route control unit 9 
has the same functions as those of the conventional router 

25 and the layer-3 switch. Namely, the route control unit 
9 receives the packet from the downstream connector unit 
7 and reads header information contained in this packet. 
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The route control unit 9 changes, based on the readout 
header information and a self -retained routing table, the 
header information of this packet. Then, the route 
control unit 9 forwards this packet to the edge router 
5 2 via the upstream connector unit 10. Further, the route 
control unit 9 performs the same route control for the 
packet received from the upstream connector unit 10, and 
forwards this packet to a proper IP device via the 
downstream connector unit 7 . 

10 Moreover, the route control unit 9 functions as a 

DHCP (Dynamic Host Configuration Protocol) server. To 
be specific, the route control unit 9 assigns a local IP 
address (a private IP address) to each of the IP devices 
connected to the downstream connector unit 7 . 

15 Further, the route control unit 9 has an IP masquerade 

function. The route control unit 9 identifies a source 
IP device that transmits the packet received via the 
downstream connector unit 8 by use of a translation table 
9A. FIG. 4 is a diagram showing an example of the 

20 translation table 9A. The translation table 9A will b 
e explained referring to FIG. 4. The translation table 
9A is stored with a source port number (a pre- translation 
port number) and a source IP address (a local IP address) 
that are contained in a header of the packet transmitted 

25 from each of the IP devices, and a port number (a 

post-translation port number) assigned to each of the IP 
devices in a way that makes these items of data mapping 
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to each other. The route control unit 9 rewrites a value 
of the source port number contained in the header of the 
packet received from each of the IP devices into the 
post-translation port number . Further , the route control 
5 unit 9 refers to a destination port number contained in 
the header of the packet received from the edge router 
2, and searches through the translation table to acquire 
a pre-translat ion port number mapping to the 
post-translation port number coincident with this 

10 destination port number. Then, the route control unit 
9 replaces the destination portion number contained in 
the packet header with the pre-translat ion port number 
searched from the table 9A. 

The upstream connector unit 10 is constructed of 

15 one or more acceptable connectors and PHY chips, etc. . . 
The upstream connector unit 10 is configured in accordance 
with an environment of the network to which the router 
1 is connected. The network in this category may be 
exemplified such as a leased line, ADSL, LSDN and so on. 

20 The upstream connector unit 10 transmits and receives the 
data between the router 1 and the edge router 2. 
<Edge Router> 

The edge router 2 ( corresponding to a [ second device ] 
according to the present invention) is constructed of an 
25 IP-based router. FIG. 5 is a block diagram of the edge 
router 2 in the embodiment of the present invention. The 
edge router 2 includes hardware components such as a CPU, 
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a main memory (RAM) , a sub-storage device, an acceptable 
connector, a PHY chip and a switch chip, which are connected 
to each other via a bus. The edge router 2, when various 
categories of programs stored on the sub-storage device 
5 are loaded into the main memory and executed by the CPU, 
functions as a device including a downstream connection 
unit 18, a program storage unit 19, a program management 
unit 20, a service executing unit 21 , an upstream connector 
unit 22 and a service storage unit 24. 

10 The downstream connector unit 18 is constructed of 

a plurality of acceptable connectors and PHY chips 
(physical chips) . The downstream connector unit 18 is 
configured in accordance with a network to which the edge 
router 2 is connected. The downstream connector unit 18 

15 transmits and receives the data between the edge router 
2 and the router 1. 

The program storage unit 19 is constructed of a 
nonvolatile storage device such as a flash memory, a hard 
disk, etc. . . The program storage unit 19 is stored with 

20 a program (an application program) used on the router 1. 
The program storage unit 19 is stored with programs 
corresponding to plural types of routers 1 . 

The program management unit 20 is constructed of 
a CPU, a RAM, etc. . . The program management unit 20, upon 

25 detecting that the program on the program storage unit 
19 is updated afresh, sends an update command to the router 
1 of the type corresponding to this updated program. 
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Further, the program management unit 20, when the router 
1 makes a request for downloading, reads the program 
corresponding to the type of this router 1 from the program 
storage unit 19. Then, the program management unit 20 
5 transmits the readout program to the router 1 via the 
downstream connector unit 18. 

The service execution unit 21 (corresponding to 
a [service executing module] according to the present 
invention) is constructed of a CPU, a RAM, a switch chip, 

10 etc. . . The service execution unit 21 executes the route 
control about the packets inputted from the downstream 
connector unit 18 and the upstream connector unit 22. 
Further, the service execution unit 21, when receiving 
a service request signal from the router 1, changes a 

15 service table 24A on the basis of a content of this service 
request signal. 

Moreover, the service execution unit 21 provides 
the router 1 with a service requested by the router 1. 
Namely, the service execution unit 21 controls a line 

20 disposed upstream of the upstream connector unit 22 in 
accordance with the service requested by the router 1. 
The services of these categories are fixed bandwidth 
assurances, multicasting, VPN, etc... Further, the 
service execution unit 21, when requested by the router 

25 1 to stop the service, stops the execution of the service 
concerned . 

The upstream connector unit 22 is constructed of 
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one or more acceptable connectors and PHY chips. The 
upstream connector unit 22 is configured corresponding 
to the environment of the network to which the edge router 
2 is connected. The networks of this category are 
5 exemplified such as gigabit Ethernet, MAPOS (Multiple 
Access Protocol over SONET /SDH (Synchronous Optical 
Digital Network/Synchronous Digital Hierarchy) ) and so 
on . The upstream connector unit 22 transmits and receives 
the data between the edge router 2 and the ISP core router 
10 to which this edge router 2 belongs. 

The service storage unit 24 (corresponding to a 
[second service storage module] according to the present 
invention) are constructed of a RAM, etc. . . The service 
storage unit 24 is stored with a service table 24A. FIG. 
15 6 is a diagram showing an example of the service table 
24A. The service table 24A will be explained referring 
to FIG. 6. The service table 24A is stored with a source 
address (a source IP address), a source port number and 
a service name in a way that makes these items of information 
20 mapping to each other. This source address is a value 
of the source address contained in the packet header and 
defined as a global IP address assigned to the router 1 
that transmits this packet. The source port number is 
a source port number contained in the packet header and 
25 also a value replaced by the router 1 that transmits this 
packet. Namely, this source port number corresponds to 
the post-translation port number in the translation table 
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9A. Accordingly, a service mapping to the source address 
and the source port number contained in the header of the 
packet inputted to the edge router 2, is searched for in 
the service table 24A. Then, the service searched for 
5 i s executed with respect to this packet. This process 
is called "filtering"- 
<PC> 

Referring back to FIG. 1, the PC3 has a display device, 
an input device and a communication control device in 

10 addition to the main body including the central processing 
unit, the main memory, etc... The PC3 is so connected 
as to be communicable with the router 1 through the network . 
The PC 3 is installed with a Web Browser. Therefore, the 
user can set the router 1 by use of the Web Browser on 

15 the PC 3. Namely, the user can set contents of the service 
table 11A through the service setting unit 13 by use of 
the PC 3. 

<ITTV> 

The ITTV 4 is a television (TV) including the 
20 communication control device and is so connected as to 
be communicable with the router 1 via the network. The 
ITTV 4 receives picture data from the streaming 
distribution server 2 3 installed based on ISP, and displays 
the data as a picture. At this time, the stable streaming 
25 distribution is actualized by selecting a fixed bandwidth 
assurance service . 

<IP Telephone> 
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The IP telephone 5 is a telephone including the 
communication control device and is so connected as to 
be communicable with the router 1 via the network. The 
IP telephone 5 encodes a voice inputted and packetizes 
5 the encoded data into an IP packet . Then, the IP telephone 
5 sends the thus generate IP packet to the router 1 . Further,, 
the IP telephone 5 receives the packet from the router 
1 and reproduces a voice from this packet. 

<Other IT Electric Household Appliances> 

10 Other IT electric household appliances 6 are IT 

electric household appliances different from the ITTV and 
the IP telephone and are, for instance, an IT microwave 
oven, an IT electric water heater. The IT electric 
household appliance 6 includes the communication control 

15 device and is so connected as to be communicable with the 
router 1 via the network. The IT electric household 
appliance 6 receives the packet from the router 1 ad 
processes the packet received. Further, the IT electric 
household appliance 6 assembles a packet and sends the 

20 packet to the router 1. 

<Streaming Distribution Server> 

The streaming distribution server 23 is constructed 
of a PC, a workstation, etc... The streaming distribution 
server 23 distributes music data and picture data encoded 
25 based on the streaming technology t the IP device via the 
network. The streaming distribution server 23 may store 
a self-installed hard disk with previously-encoded music 
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data and picture data or with the music data and the picture 
data before being encoded. In the latter case, the 
encoding process is executed in parallel with the 
distribution process. This hard disk may be, however, 
5 provided separately from the streaming distribution 
server 23. 

<IPsec Trunk> 

The IPsec trunk 25 is constructed of a PC, a 
workstation, etc... The IPsec trunk 25, when the VPN 

10 service is carried out in the edge router 2, executes 
processes necessary for actualizing VPN . To be specific, 
the IPsec trunk 25 receives from the edge router 2 the 
packet to be forwarded to VPN, and encrypts and 
encapsulates this packet. Further, the IPsec trunk 25 

15 receives from the edge router 2 the packet received from 
VPN, and decapsulates and decrypts this packet. 
<RADIUS Server> 

The RADIUS server 26 is constructed of a PC, a 
workstation, etc... The RADIUS server 26 permits or 

20 rejects the access on the basis of the user ID and the 
password. Further, the RADIUS server 26 gathers pieces 
of data called attributes such as a connection time, 
inputted/outputted packet sizes, a callback ID and a port 
number used. 

25 [Operational Example] 

FIG. 7 is a flowchart showing an operational example 
when the router 1 sends a service request to the edge router 
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2. The operational example of the router 1 will be 
described referring to FIG . 7. 

To start with, the linkup detection unit 14 detects 
whether or not there is a linked-up acceptable connector 
5 among the acceptable connectors provided in the downstream 
connector unit 7 (SOI) . Further, the packet detection 
unit 15 detects whether or not there is an acceptable 
connector having received the packet among the acceptable 
connectors provided in the downstream connector unit 7 

10 (S02) . The linkup detection unit 14, when detecting the 
linkup (S01-YES), notifies the service determining unit 
12 of a connector number mapping to the acceptable 
connector with the linkup detected (S03) . The packet 
detection unit 15, when detecting the receipt of the packet 

15 (S02-YES), notifies the service determining unit 12 of 
a connector number mapping to the acceptable connector 
with the packet receipt detected (S03) . 

The service determining unit 12 searches for and 
determines a service mapping to the notified connector 

20 number in the service table 11A (S04). The service 

determining unit 12 reads from the service storage unit 
11 a user ID and a password used for authentication on 
the edge router 2, and generates a connection request 
signal. Then, the service determining unit 12 transmits 

25 the connection request signal to the edge router 2 via 
the upstream connector unit 10 (S05) . The service 
determining unit 12, when the router 1 is connected to 
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the edge router 2, generates a service request signal and 
transmits this service request signal to the edge router 
2 (S06) . Then, the route control unit 9 starts the route 
control (S07) . 
5 [Operation Sequence] 

FIG. 8 is a diagram showing an operation sequence 
of the system in this embodiment. The system operation 
sequence in this embodiment consists of a download phase, 
a setting phase and a connection phase. The following 
10 is a discussion on the operation sequence in the respective 
phases . 

<Download Phase> 

The download phase is that the router 1 downloads, 
from the program storage unit 16, the application program 

15 stored thereon in the edge router 2. At this time, the 
router 1 requests the edge router 2 to start downloading 
(SeqOl) . The edge router 2, upon receiving this request, 
transmits the application program to the router 1 concerned 
(Seq02) . 

20 <Setting Phase> 

According to the setting phase, the user sets the 
service table 11A provided in the router 1 by use of the 
IP device. At this time, it is desirable that the user 
utilizes the IP device including the I/O device such as 

25 a display, a keyboard, etc. as in the case of the PC 3. 
Therefore, the following discussion will deal with a case 
where the user sets the service table 11A through on the 
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PC 3. 

The user accesses the Web server function installed 
in the router 1. Namely, the user accesses the service 
setting unit 13 through on the PC 3 (Seq03) . Then, the 
5 router 1 (the service setting unit 13) provides a set 
content to the PC 3 (Seq04) . The set content is a user 
interface (UI) used for the user to set the service table 
11A. The user sets the service table 11A by utilizing 
this user interface through on the PC 3 (Seq05) . 
10 <Connection Phase> 

The connection phase is that the edge router 2 
provides a service corresponding to each of the IP devices . 
To begin with, the IP device is connected to the router 

1 (Seq06) . Alternatively, the IP device sends the packet 
15 to the router 1. Then, the router 1 transmits the 

connection request signal containing the user ID and the 
password to the edge router 2 (Seq07) . The edge router 

2 transfers the received user ID and password to the RADIUS 
server 26, and requests the RADIUS server 26 to 

20 authenticate . The RADIUS server 2 6 authenticates the user 
by use of the received user ID and password (Seq08 ) . Then, 
the RADIUS server 26 sends a result of the authentication 
to the edge router 2 . The edge router 2 executes a process 
of assigning a global IP address as a connection 

25 acknowledgement to the router 1 with the user authenticated, 
and so on (Seq09) . 

Next, the router 1 determines a service mapping to 
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the acceptable connector (port) connected. Then, the 
router 1 transmits a service request signal about the 
determined service to the edge router 2 (SeqlO) . The edge 
router 2, when receiving the service request signal, 
5 executes service setting (for filtering and routing) 
(Seqll). Namely, the edge router 2 starts , in cooperation 
with the RADIUS server 26, an accounting process for the 
router 1 . The accounting process is executed on a variety 
of bases such as a packet count of the packets across the 

10 edge router 2, a connection time and so forth. Then, the 
edge router 2 notifies the router that the service is 
started as a service setting acknowledgement (Seql2). 
Thus, the communications among the IP device, the router 
1, the edge router 2 and the terminal/server on the Internet 

15 are started (Seql3) . 

[Operation and Effect] 

According to this embodiment, the user sets the 
service to be provided for every acceptable connector 
through on the PC 3. The service determining unit 12 

20 searches for the service set for the acceptable connector 
to be used, and request the edge router 2 for this service. 
Therefore, the edge router 2 provides the services 
different for each of the acceptable connectors included 
in the router 1. Accordingly, the following services can 

25 be actualized. 

Firstly, a different QoS class (Quality of Service 
class) can be set for each of the acceptable connectors 
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of the router 1 with respect to the line used within the 
ISP network . For instance, a the QoS class of a best-effort 
service is provided to the IP device connected to a certain 
acceptable connector, while the QoS class of the fixed 
5 bandwidth assurance is provided to the IP device connected 
to other acceptable connector. 

Secondly, the plurality of IP devices can be 
connected respectively to different VPNs by use of one 
single contract line with the ISP. For example, the IP 
10 device connected to a certain acceptable connector is 
provided with VPN for connection to LAN in a company A, 
while the I P device connected to other acceptable connector 
is provided with VPN for connection to LAN in a university 
B. 

15 Further, the fixed bandwidth assurance and 

multicasting are selected for the acceptable connector 
to which, e.g., the ITTV 4 is connected, and it is desirable 
that the category "link" be selected as a connection 
detection mode. These services are selected to the ITTV 

20 4, whereby the router 1 detects the linkup when switching 
ON the power source of the ITTV 4. Then, the user can 
receive, at the QoS class of the fixed bandwidth assurance, 
the picture distributed from the streaming distribution 
server 23 within the ISP network. 

25 Moreover, the user is able to arbitrarily change 

the service mapping to the connector number of an arbitrary 
acceptable connector by use of the IP device (e.g., the 
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PC3) . Therefore, as for the IP device having no I/O 
interface, the service mapping to the connector number 
of the acceptable connector to which this IP device is 
connected, can be set by use of the IP device (e.g., the 
5 PC 3) having other I/O interface. Moreover, what is 
described as below can therefore be carried out. To be 
specific, the PC 3 is normally connected to the acceptable 
connector receiving the best-effort service and can be 
changed to temporarily receive the service of the fixed 
10 bandwidth assurance without changing the acceptable 

connector for connection. This scheme is effective in 
a case where, for instance, a peer-to-peer connection with 
other PC is established, and a one-to-one game is performed, 
and so on. 

15 Further, the router 1 requests the edge router 2 

for a necessary service each time. Accordingly, the edge 
router 2 has no necessity of standby always for providing 
the router 1 with the service that should be provided. 
Namely, the edge router 2 may be stored with the respective 

20 settings of filtering and routing about only the services 
requested of the router 1. Hence, the respective setting 
entries for filtering and routing can be saved. 
[Modified Example] 

The downstream connector unit 7 may be configured 
25 in whatever modes on condition that its configuration 
supports LAN (Local Area Network) or a system corresponding 
to LAN. Moreover, the upstream connector unit 10 may be 
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configured in whatever modes on condition that its 
configuration supports WAN (Wide Area Network) or a system 
corresponding to WAN. 

Further, the service determining unit 12 may be 
5 configured to prompt the user to select the service to 
be executed without referring to the service table 11A 
stored on the service storage unit 11. 

In this case, the IP device can receive the service 
that is different each time in the same acceptable 
10 connector without the service being fixed to the connector 
number . 

Furthermore, the service determining unit 12 may 
be configured to prompt the user to select the service 
with respect to only an arbitrary acceptable connector 

15 and to reflect the contents of the service table 11A with 
respect to other acceptable connector. 

Moreover, the service table 11A may be structured 
to store a MAC (Media Access Control) address of the IP 
device as a substitute for the connector number. Namely, 

20 the service table llAmay be structured to store a service 
name, a connection detection mode, a user ID and a password 
for every MAC address of the IP device. In this case, 
the service determining unit 12 searches through the 
service table 11A in a way that refers to the MAC address 

25 contained in the packet inputted from the downstream 
connector unit 7 . 

Further, the edge router 2 may be configured to 
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include an encrypting module; thereby providing an 
encryption service. More specifically, the edge router 
2 may be configured to, if the encryption service is 
selected for the packet received from the router 1, encrypt 
5 this packet and forward the encrypted packet to the core 
router . 



